Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VRZobDA_27SxEB43mAqKW-69LxA.roa
File: VRZobDA_27SxEB43mAqKW-69LxA.roa (raw, json)
Hash identifier: 5AeRxhzbfQxpSLjuvGTSMC+pJI9IIQtg/TAu2M82evE=
Subject key identifier: 55:16:68:6C:30:3F:DB:B4:B1:10:1E:37:98:0A:8A:5B:EE:BD:2F:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60E4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VRZobDA_27SxEB43mAqKW-69LxA.roa
Signing time: Fri 16 May 2025 11:10:28 +0000
ROA not before: Fri 16 May 2025 11:10:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24804 (0x60e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 11:10:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5516686C303FDBB4B1101E37980A8A5BEEBD2F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:e4:75:17:14:56:84:16:37:13:3d:29:d6:
bf:64:ef:a5:90:cb:79:0c:da:6f:57:ea:bb:d2:3d:
b6:c5:50:bd:4d:60:56:18:7a:56:ce:b9:31:fe:3c:
5d:e9:76:3a:eb:b9:38:a4:c9:bb:97:fd:b1:bf:cb:
30:ca:c0:2a:a2:9d:03:50:bb:22:cc:3b:97:e2:7b:
85:5c:57:1c:06:52:6a:2f:6c:0e:ad:d6:dc:92:6f:
d8:51:12:7b:0d:50:fd:8a:d6:be:94:66:5b:4c:5e:
26:57:bb:13:f6:5c:e9:37:74:20:1d:9b:52:d2:60:
21:30:a8:07:b4:29:c3:a1:d6:dc:fc:bd:b2:a0:57:
22:26:a4:ef:89:66:c3:a0:3b:e1:52:fa:38:2b:0c:
55:67:8b:c0:7a:29:a2:20:04:3d:63:ed:19:30:86:
a0:6b:64:97:fa:55:f4:1f:ca:51:59:7a:0f:d7:1c:
d3:6c:0c:4d:75:f0:93:b3:ad:4c:f1:bb:30:7d:b8:
3d:1d:d6:69:39:4d:41:5e:dd:de:6e:ec:61:32:8d:
60:10:11:6b:aa:db:cd:9d:47:a6:3a:d3:ad:e0:31:
0d:4f:f6:9d:a9:bf:fc:36:10:0c:22:01:36:d8:09:
7b:92:4a:3c:64:a9:09:94:08:78:56:a1:17:da:82:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:68:6C:30:3F:DB:B4:B1:10:1E:37:98:0A:8A:5B:EE:BD:2F:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VRZobDA_27SxEB43mAqKW-69LxA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a3:c9:c1:67:46:dc:7d:e7:b8:fd:89:4a:48:88:e1:d4:c1:59:
ac:26:96:c0:ad:bc:c3:62:c0:bc:24:8f:4c:ba:c0:bc:f3:4c:
18:91:68:6a:d6:28:31:52:01:5d:f5:53:de:02:d8:dc:bb:2d:
a6:22:53:59:1b:b2:b3:8b:ef:0c:ee:27:73:81:88:78:66:cc:
8d:fe:73:26:e2:a9:b6:ed:ff:34:9f:14:31:aa:a4:f1:bd:06:
3e:3a:7e:b8:e2:45:03:65:4d:a3:b1:4d:33:ee:a6:c1:d1:13:
1f:f1:21:56:73:71:82:e6:f9:02:ed:f5:7c:9b:42:10:ea:c2:
a4:e5:ad:58:64:21:e8:f1:64:2a:42:2e:7a:7c:9c:64:e1:0c:
f7:fa:3e:6c:76:f3:4f:99:c4:5a:a3:67:6d:8f:f7:ab:0a:b5:
6d:c8:fd:cb:ab:3d:73:06:46:20:0f:cf:dd:7b:7d:13:66:66:
4d:15:f1:fd:de:03:a9:45:21:cc:ac:b2:2c:02:d5:b3:f7:08:
a6:05:f3:87:bc:05:f9:4f:39:34:36:4b:8f:ce:fe:e6:52:e7:
66:41:7a:25:d6:5a:64:01:29:a0:bd:7a:5a:9f:b6:03:09:12:
0c:5a:c9:d0:8f:e5:25:f2:f5:4e:cf:fe:3b:e9:19:8d:3c:4a:
98:cc:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:13:23 2025 by rpki-client